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DETAILED ACTION 

1. In response to the previous office action, claims 1 and 30 have been amended. 
Claims 1-5, 8-13, and 30-36 have been examined. 

Claim Rejections - 35 USC § 101 and 35 USC §112 

2. In view of Applicant's amendments, all previous rejections under 35 U.S.C. 101 
and 35 U.S.C. 1 12 are withdrawn. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

3. Claims 1, 4, 8, 9, 11, 12, 13, 30-32, and 34-36 are rejected under 35 U.S.C. 
103(a) as being unpatentable over U.S. Patent No. 6,269,379 to Hiyama et al. in view of 
U.S. Patent No. 6,694,434 to McGee et al. further in view of U.S. Patent No. 5,191,611 
to Lang further in view of U.S. Patent No. 5,319,776 to Nile et al. 
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As per claim 1 , Hiyama discloses a system for acquiring images from an 
endoscope (see column 3, lines 54-55). Each image constitutes a frame. The system 
has memory for storing images and operating code, which is loaded from a hard disk at 
power-up (see column 4, lines 3-5 and column 6, lines 30-32), a viewing monitor for 
displaying frames (see column 4, lines 28-31). 

Hiyama does not disclose the use of an encrypted registry or measures to 
directly protect against computer viruses, but notes that it is desirable to protect against 
viruses (see column 8, lines 66-67). 

McGee discloses that processes be checked against a registry (see column 5, 
lines 13-20) before being started (see column 4, lines 20-23) and that registry 
information is signed (encrypted) using a private key (see column 4, lines 35-39), and 
authenticated (decrypted) using a public key (see column 5, lines 10-12), and further 
suggests that it would be desirable to provide a mechanism that reduces the likelihood 
of an unauthorized application being run, such as one that contains a virus (see column 
2, lines 42-48). 

Therefore, it would have been obvious to one having ordinary skill in the art at 
the time the invention was made to implement security on the system of Hiyama in the 
manner disclosed by McGee, as it would be desirable to provide a mechanism that 
reduces the likelihood of an unauthorized application being run, such as one that 
contains a virus. 

Since it only uses signatures, the system of Hiyama and McGee does not search 
the decrypted data for directory entries. 
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Lang discloses a system for protecting material on storage media that includes 
the encrypting of the entire directory, and the decrypting of the directory before 
searching it (see column 1 1 , lines 57-66), and further notes that it is a level of protection 
that users can only see and use the directories for the zones for which they have 
access privileges (see column 15, lines 33-36). 

Therefore it would have been obvious to one of ordinary skill in the art at the time 
the invention was made to encrypt the entire directory and then decrypt it before 
searching it, as disclosed by Lang, so users can only see and use the directories for the 
zones for which they have access privileges. 

Hiyama, McGee, and Lang also do not disclose a means by which a file may be 
tested for a computer virus before being installed on a hard disk. 

Hile discloses a computer virus safeguard system wherein a file being copied to 
a hard disk is tested for virus signatures before being copied to the hard disk (see 
column 4, lines 23-47). Hile further suggests that systems that do not do this cannot 
totally prevent a virus from attacking or spreading (see column 1, lines 51-54). 

Therefore, it would have been obvious to one having ordinary skill in the art at 
the time the invention was made to modify the system of Hiyama, McGee, and Lang by 
testing a file being copied to a hard disk for virus signatures, as disclosed by Hile, as 
systems that do not do this cannot totally prevent a virus from attacking or spreading. 

Regarding claims 4, 8, and 9, McGee discloses that the system checks if the 
application being started is on the registration list, and, if not, notifies the user about the 
potential virus and gets instructions using a graphical user interface (see McGee, 
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column 7, line 63 to column 7, line 9 and column 7, lines 41-65), and kills the process if 
the user does not give permission (see McGee, figure 3a). 

Regarding claims 1 1 and 34, Hiyama, McGee, and Lang do not disclose an 
option to delete files from storage after discovering that they may be infected. 

Hile further discloses a virus safeguard wherein infected files are deleted from 
storage (see column 7, lines 17-44), and further suggests that prevents the virus from 
spreading to other computer systems that communicate with that system (see column 2, 
lines 4-11). 

Therefore, it would be obvious to one of ordinary skill in the art at the time the 
invention was made to further modify the invention of Hiyama, McGee, and Lang by 
adding an option to delete files from storage, as disclosed by Hile, in order to prevent 
the virus from spreading to other computer systems that communicate with that system. 

Regarding claims 12 and 13, after the user is notified that an application is 
requesting to execute (see McGee, column 8, lines 42-45), a second signal is sent to 
the user asking whether execution privileges should be granted (see McGee, column 8, 
lines 45-51), resulting in the application being registered. 

Hiyama, McGee, Lang, and Hile do not disclose the use of actuators in the user 
interfaces. 

Regarding all limitations involving the use of virtual actuators in user interfaces, 
Official notice is given that the use of actuators for user dialog in graphical user 
interfaces is well-known in the art, as they make programs more user-friendly. 
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Therefore, it would be obvious to one of ordinary skill in the art at the time the 
invention was made to implement the invention of Hiyama, McGee, Lang, and Hile 
using actuators in the user interfaces, in order to make the system more user-friendly. 

Regarding claims 30-32, 35, and 36, the system disclosed by Hiyama constitutes 
a computer. 

4. Claims 2 and 3 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
U.S. Patent No. 6,269,379 to Hiyama et al, in view of U.S. Patent No. 6,694,434 to 
McGee et al. further in view of U.S. Patent No. 5,191,611 to Lang further in view of U.S. 
Patent No. 5,319,776 to Hile et al. as applied to claim 1 and further in view of U.S. 
Patent No. 5,881,151 to Yamamoto. 

Hiyama, McGee, Lang, and Hile do not disclose checking for checksums or file 

size. 

The virus diagnosing system disclosed by Yamamoto checks for a file using 
techniques including checksums and size checks before executing a program (see 
abstract), and Yamamoto further suggests that this enables a discrimination to be made 
to minimize the damage of the virus (see column 2, line 66 to column 3, line 2). 

Therefore, it would be obvious to one of ordinary skill in the art at the time the 
invention was made to further modify the invention of Hiyama, McGee, Lang, and Hile 
by checking for checksums and size, as disclosed by Yamamoto, to minimize the 
damage of the virus. 
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5. Claims 5, 10, and 33 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over U.S. Patent No. 6,269,379 to Hiyama et al. in view of U.S. Patent No. 6,694,434 to 
McGee et al. further in view of U.S. Patent No. 5,191,61 1 to Lang further in view of U.S. 
Patent No. 5,319,776 to Hile et al. as applied to claims 4, 9, and 32, above, and further 
in view of U.S. Patent No. 6,266,773 to Kisor et al. 

Hiyama, McGee, Lang, and Hile do not disclose a log of events. 

Kisor discloses a computer security system wherein historical events are 
compiled, so that the real time activity of a program can be monitored to see whether 
the real time activity fits within the stored patterns. 

Therefore, it would be obvious to one of ordinary skill in the art at the time the 
invention was made to modify the invention of Hiyama, McGee, Lang, and Hile by 
compiling historical events, as disclosed by Kisor, so that the real time activity of a 
program can be monitored to see whether the real time activity fits within the stored 
patterns. 

Response to Arguments 

6. Applicant's arguments filed 5 June 2006 have been fully considered but they are 
not persuasive. 

In response to Applicant's arguments that the protection mechanisms in the cited 
art are user-specific, unlike Applicant's disclosed invention, it is noted that the claims as 
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presented in no way preclude such an arrangement. If the cited art discloses a claimed 
invention insofar as it is recited, then the rejection is proper. 



Conclusion 

7. THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 . 1 36(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 

8. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Matthew E. Heneghan, whose telephone number is 
(571 ) 272-3834. The examiner can normally be reached on Monday-Friday from 8:30 
AM - 4:30 PM Eastern Time. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Jacques Louis-Jacques, can be reached at (571) 272-6962. 
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Any response to this action should be mailed to: 

Commissioner of Patents and Trademarks 
P.O. Box 1450 
Alexandria, VA 22313-1450 
Or faxed to: 

(571)273-3800 

Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is (571) 272- 



Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 



2100. 



MEH 





July 17, 2006 



